TI-2023-01390 CVE-2023-1471 · GHSA-gh6q-64q5-63q7
WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection
Priority MEDIUM 42
The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of suffi…